Skip to content
OpenAdvisories

Vendor

prefix-dev

1 known vulnerabilities.

Products

pixi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-47425

    Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

    Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types` performs only `.trim()` on the `command` field before the linker joins it onto the install prefix …

    conda prefix-dev py-rattler rattler PyPI crates.io